Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa
File:                     d931f223-a5e0-357c-9df4-646112c7d5fd.roa (raw, json)
Hash identifier:          ccxMYpyoSiqO5Nwd1yjmTi/7CvtWLDllg52A5tJD1O8=
Subject key identifier:   8F:41:2E:C6:CA:2F:61:92:54:0E:FD:EB:9A:E4:3B:6E:6B:CE:62:DC
Certificate issuer:       /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3
Certificate serial:       010D0C9F4328584D237A1AFB9B46A36E4196C380
Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     26395
IP address blocks:        159.222.160.0/23 maxlen: 23
                          159.222.160.0/24 maxlen: 24
                          159.222.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:1a:fb:9b:46:a3:6e:41:96:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=d2a5a515-bf29-4667-a6a6-8539ec09baf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:82:08:8d:b7:df:62:7b:3c:87:07:31:d0:
                    97:5f:3d:01:a5:bf:a4:ab:ce:71:eb:e6:58:53:3a:
                    86:2e:e5:87:68:d4:6f:4e:6b:b0:98:39:3f:81:af:
                    d7:bd:96:42:96:16:ff:84:58:ec:32:72:f1:81:58:
                    90:c9:28:92:35:dc:46:1e:70:aa:0e:2e:f4:82:32:
                    d4:7c:f2:2e:9c:9e:58:ec:68:cb:bf:80:78:42:90:
                    94:7e:be:01:e8:7d:21:9c:da:10:87:2a:cf:2a:a5:
                    e3:b0:a4:f5:7b:de:8e:d3:16:2d:16:2a:c0:ac:60:
                    6d:89:2c:a0:6a:e0:c9:36:86:53:b1:e6:94:f6:bc:
                    7b:cd:93:5c:07:ef:26:4a:91:2b:07:cd:60:4b:b8:
                    50:ab:1f:1d:41:2a:b8:d5:37:2b:84:9e:5d:92:88:
                    d2:c5:fb:b0:ea:0b:7d:01:ff:b6:b8:5f:9e:4c:55:
                    e5:56:f5:df:d3:13:df:0a:35:07:9d:4d:5a:4a:a5:
                    33:34:b1:e8:ae:15:1a:56:b1:46:d4:d6:7a:dd:a8:
                    60:59:eb:6a:18:45:75:69:12:85:82:00:c1:c8:08:
                    b7:c0:cb:5e:37:4c:fd:6e:82:35:c5:32:b4:c8:ff:
                    1b:97:7a:49:c5:35:e1:a1:9e:8f:d9:d9:23:66:43:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:41:2E:C6:CA:2F:61:92:54:0E:FD:EB:9A:E4:3B:6E:6B:CE:62:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.222.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:69:b3:ad:d8:7d:87:eb:21:d9:e2:e4:c8:3c:6f:dd:82:
         89:a3:b8:d9:d2:a2:e5:3c:1a:19:87:6e:03:cf:fc:59:e4:96:
         ec:ed:3b:a3:a8:03:00:42:3c:97:60:2b:7d:ef:12:2d:08:cd:
         be:96:df:a1:be:3d:58:af:0a:68:74:e1:c3:53:e7:60:a1:56:
         c3:8a:e9:6a:93:53:ca:71:cf:ca:a9:02:96:d8:87:6c:bd:db:
         f4:d2:2e:cf:ff:21:1f:ac:ed:14:84:38:85:af:0d:77:2b:0c:
         58:21:63:ef:a6:fe:33:39:00:2d:cd:13:1b:4d:8c:6b:a4:9c:
         83:55:70:e0:14:a4:01:3a:09:c4:45:22:af:b7:3c:96:6c:2f:
         bf:69:1a:75:b7:00:c9:31:96:2c:1e:b6:d6:8e:41:3d:e4:60:
         2f:a7:8a:ec:7a:e6:ff:10:28:34:a9:9b:f2:65:5c:d1:15:27:
         ab:c5:4f:ac:ee:67:63:22:c3:e6:d8:d2:09:d6:a9:f8:66:cb:
         04:86:2d:c2:49:7b:02:8c:97:99:81:58:69:74:ae:10:ce:fd:
         9b:78:de:c2:35:e4:6b:bd:37:10:7f:2b:71:55:d6:2e:06:77:
         50:7d:65:8b:16:b0:ef:a9:9d:08:50:ed:0f:f1:01:e3:e2:1a:
         af:06:53:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehr7m0ajbkGWw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWNlZTU2OGQtZWIwMC00NzhjLWI0ODYtZGIzZjVkNjJj
YmYzMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZDJhNWE1MTUtYmYyOS00NjY3LWE2YTYtODUzOWVjMDliYWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAuCCI2332J7PIcHMdCXXz0Bpb+kq85x6+ZY
UzqGLuWHaNRvTmuwmDk/ga/XvZZClhb/hFjsMnLxgViQySiSNdxGHnCqDi70gjLU
fPIunJ5Y7GjLv4B4QpCUfr4B6H0hnNoQhyrPKqXjsKT1e96O0xYtFirArGBtiSyg
auDJNoZTseaU9rx7zZNcB+8mSpErB81gS7hQqx8dQSq41TcrhJ5dkojSxfuw6gt9
Af+2uF+eTFXlVvXf0xPfCjUHnU1aSqUzNLHorhUaVrFG1NZ63ahgWetqGEV1aRKF
ggDByAi3wMteN0z9boI1xTK0yP8bl3pJxTXhoZ6P2dkjZkP1+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9BLsbKL2GSVA7965rkO25rzmLcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lY2Vl
NTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNmNWQ2MmNiZjMvZDkzMWYyMjMtYTVlMC0z
NTdjLTlkZjQtNjQ2MTEyYzdkNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWNlZTU2OGQtZWIwMC00NzhjLWI0
ODYtZGIzZjVkNjJjYmYzL2VjZWU1NjhkLWViMDAtNDc4Yy1iNDg2LWRiM2Y1ZDYy
Y2JmMy5jcmwwHwYDVR0jBBgwFoAU3ezBYmsWKE4/m1LGgwTF1nWApUYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lY2VlNTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNm
NWQ2MmNiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn96gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjnabOt2H2H6yHZ4uTIPG/dgomjuNnSouU8GhmHbgPP/FnkluztO6Oo
AwBCPJdgK33vEi0Izb6W36G+PVivCmh04cNT52ChVsOK6WqTU8pxz8qpApbYh2y9
2/TSLs//IR+s7RSEOIWvDXcrDFghY++m/jM5AC3NExtNjGuknINVcOAUpAE6CcRF
Iq+3PJZsL79pGnW3AMkxliwettaOQT3kYC+niux65v8QKDSpm/JlXNEVJ6vFT6zu
Z2Miw+bY0gnWqfhmywSGLcJJewKMl5mBWGl0rhDO/Zt43sI15Gu9NxB/K3FV1i4G
d1B9ZYsWsO+pnQhQ7Q/xAePiGq8GU9g=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:31 2026 by rpki-client